13538 matches found
PHPLiveHelper global.php abs_path Parameter PHP Code Execution - Ver2 (CVE-2006-4051)
A code execution vulnerability has been reported in Turnkey Web Tools PHP Live Helper. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Free File Hosting forgot_pass.php AD_BODY_TEMP Parameter PHP Code Execution - Ver2 (CVE-2006-5762)
A code execution vulnerability has been reported in Free File Hosting. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Prime Data Center Network Manager processImageSave.jsp Arbitrary File Upload (CVE-2013-5486)
An arbitrary file upload vulnerability exists in Cisco Prime Data Center Network Manager...
Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8445)
A memory corruption vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Acrobat and Reader parses a malformed PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Acrobat and Reader Memory Corruption (APSB13-22: CVE-2013-3352)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
ABB MicroSCADA Wserver Multiple Buffer Overflows
Multiple Buffer Overflow vulnerabilities have been reported in the Wserver component of ABB MicroSCADA. The vulnerabilities are due to the copying of user controlled data to stack-based buffers without size verification. A remote attacker can exploit this issue by sending a specially crafted...
Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)
Javascript may contain variables assigned with overly long strings. This behavior may indicate an exploitation attempt...
Cisco Prime Data Center Network Manager FileUploadServlet Arbitrary File Upload (CVE-2013-5486; CVE-2019-1620)
An arbitrary file upload vulnerability exists in Cisco Prime Data Center Network Manager. The vulnerability is due to lack of authentication and insufficient input validation in the FileUploadServlet when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to...
Apache Solr SolrResourceLoader Directory Traversal (CVE-2013-6397)
A directory traversal vulnerability has been reported in Apache Solr. The vulnerability is due to insufficient validation of the resource paths passed to certain Solr REST services. A remote attacker can exploit this vulnerability by sending a specially crafted request to Apache Solr. Successful...
Adobe Flash Player Memory Corruption (APSB13-28: CVE-2013-5332)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Microsoft IIS Short Filename Information Disclosure
An information disclosure vulnerability has been reported in Microsoft IIS. The vulnerability is due to an error in the way Microsoft IIS handles specially crafted URLs. A remote attacker can leverage this vulnerability to view undisclosed information stored on the server...
JavaScript Malicious Obfuscation Techniques
Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Since the exploits are obfuscated they may not be detected by IDS and IPS systems, thus allowing attackers to successfully attack target machines...
Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)
A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Microsoft Access 1.x database files .mdb. This vulnerability can be exploited by causing an application that uses the...
Adobe Flash Player Memory Corruption (APSB13-26: CVE-2013-5329)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
GLPI install.php Remote Command Execution (CVE-2013-5696)
A command execution vulnerability has been reported in GLPI...
PHP OpenSSL Extension X.509 Certificate Memory Corruption (CVE-2013-6420)
A code execution vulnerability has been reported in PHP. The vulnerability is due to a memory corruption error when handling a malicious ASN.1 data type for a timestamp in an X.509 certificate. A remote attacker can exploit this flaw by sending a malicious certificate...
WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)
A stack-based buffer overflow vulnerability has been reported in WellinTech KingView ActiveX control. The vulnerability is due to failure to perform adequate boundary checks on user-supplied input. A remote attacker can exploit this vulnerability by sending via a long second argument to the...
HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)
An authentication bypass vulnerability exists in the SOM add-in module of HP Intelligent Management Center...
Zabbix Multiple SQL Injections Information Disclosure
An SQL Injection vulnerability has been reported in Zabbix...
Vtiger CRM Authenticated Remote Code Execution
A remote code execution vulnerability has been reported in VTiger CRM...
Microsoft Internet Explorer runtimeStyle Handling Memory Corruption (MS13-080; CVE-2013-3882)
A memory corruption vulnerability exists in Microsoft Internet Explorer...
IBM Platform Symphony SOAP Requests Processing Buffer Overflow (CVE-2013-5387)
A buffer overflow vulnerability has been reported in IBM Platform Symphony...
AdaptWeb Web Application SCADA SQL Injection (CVE-2009-2152)
An SQL Injection vulnerability has been reported in AdaptWeb 0.9.2. The vulnerability is due to improper validation of the CodigoDisciplina parameter passed to the application. A remote unauthenticated attacker could exploit this vulnerability by sending a request with a crafted CodigoDisciplina...
HP SiteScope issueSiebelCmd SOAP Request Code Execution (CVE-2013-4835)
A command execution vulnerability has been found in HP SiteScope...
Microsoft Access Memory Corruption (MS13-074; CVE-2013-3155)
A remote code execution vulnerability exists in Microsoft Access...
GIMP XWD File Handling Heap Buffer Overflow (CVE-2013-1978)
A heap buffer overflow vulnerability leading to code execution has been reported in GNU Image Manipulation Program GIMP. The vulnerability is due to insufficient validation of certain fields while parsing XWD files. Remote attackers can exploit this vulnerability by enticing the target user to op...
Sybase Multiple Products Directory Traversal (CVE-2011-2474)
A directory traversal vulnerability has been reported in multiple Sybase products...
OpenLDAP rwm Overlay Denial of Service (CVE-2013-4449)
A denial of service vulnerability has been reported in OpenLDAP...
Linux Kernel UDP UFO Large Packet Denial of Service (CVE-2013-4563)
A denial of service vulnerability exists in Linux Kernel with UDP Fragmentation Offload UFO enabled...
Kingsoft Writer Font Names Buffer Overflow (CVE-2013-3934)
A code execution vulnerability has been reported in Kingsoft Writer. The vulnerability is due to an error while handling font names in WPS or Office word files. A remote attacker can exploit this vulnerability by enticing an unsuspecting user to download and process a malicious file with a...
Adobe Acrobat and Reader ToolButton Use After Free (APSB13-15; CVE-2013-3346)
A use after free vulnerability exists in Adobe Acrobat and Reader...
Nodejs js-yaml load() Code Execution (CVE-2013-4660)
A JavaScript Code Execution vulnerability has been reported in Nodejs...
Microsoft Access ACCDB File Memory Corruption (MS13-074; CVE-2013-3157)
A memory corruption vulnerability has been reported in Microsoft Access...
ABB MicroSCADA Wserver Command Execution
A command execution vulnerability has been reported in ABB MicroSCADA. The vulnerability is due to insufficient user authentication by the wserver.exe program when accepting remote execution calls. A remote, unauthenticated attacker can exploit this vulnerability to execute arbitrary commands on...
Microsoft Windows X.509 Certificate Validation Denial of Service (MS13-095; CVE-2013-3869)
A denial of service vulnerability exists in Microsoft Windows. The flaw is due to improper handling of specially crafted X.509 certificates during certificate validation. Successful exploitation could cause a denial of service condition where the web service becomes unresponsive.A remote attacker...
ManageEngine DesktopCentral AgentLogUpload Arbitrary File Upload
A code execution vulnerability has been reported in ManageEngine DesktopCentral. The vulnerability is due to lack of authentication and insufficient input validation in the AgentLogUploadServlet.class when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to...
Apache Roller OGNL Injection Remote Code Execution (CVE-2013-4212)
A command execution vulnerability exists in Apache Roller due to a lack of sanitization on OGNL expressions passed to certain methods. This can lead to OGNL injection which can result in remote code execution. A remote unauthenticated attacker could exploit this vulnerability by sending crafted...
ANSSI Improperly Issued Digital Certificates HTTPS Spoofing
Several improperly issued CA certificates could be used in HTTPS spoofing attacks...
Multiple OS Malicious Payload Remote Code Execution
A remote code execution vulnerability has been reported in multiple operating systems. A remote attacker can exploit this vulnerability by delivering malicious payload to the target machine. Successful exploitation would allow an attacker to execute code on the target...
Suspicious Javascript Variable Names (CVE-2013-2551)
Javascript may contain overly large amount of abnormal variable names. This behavior may indicate an exploitation attempt...
PDF Containing Suspicious JavaScript Code
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader when handling PDF files that contain plain JavaScript. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5049)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730) - ver 2
A code execution vulnerability exists in Microsoft Internet Information Services IIS...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5048)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5047)
A remote code execution vulnerability has been reported in Internet Explorer...
Microsoft Scripting Runtime Object Library Use-After-Free Code Execution (MS13-099; CVE-2013-5056)
A remote code execution vulnerability has been reported in the Microsoft Scripting Runtime Object Library...
PDF Containing Suspicious OpenAction
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader when handling PDF files that contain plain JavaScript. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file...
Microsoft Windows Win32 Shellcode Remote Code Execution
A remote code execution vulnerability has been reported in Microsoft Windows...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5051)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...